Simple Machines is happy to announce the release of SMF 1.1.6, which fixes a number of minor bugs in 1.1.5 and addresses a security vulnerability. While the vulnerability primarily affects SMF installations on Windows servers, we would like to encourage all users to upgrade as soon as possible. A successful exploit could result in privilege escalation.
For those users running the 1.0.x and 2.0 beta branch, we have released 1.0.14 and 2.0 beta 4 respectively, addressing the above issues.
SMF 1.0.13 users
Use the package manager to upgrade to 1.0.14. Simply visit your admin center and follow the upgrade advice on the main page. Alternatively, you can use either of the packages on the download page.
SMF 1.1.5 users
Use the package manager to upgrade to 1.1.6. Simply visit your admin center and follow the upgrade advice on the main page. Alternatively, you can use either of the packages on the download page.
SMF 2.0 beta 3, 2.0 beta 3.1 and 2.0 beta 4 (Charter Member release)
Please upgrade to SMF 2.0 beta 4 public by using the packages from the download page. (News: What Is New In SMF 2.0 Beta 4 Public)
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual about installing and upgrading.
Finally – please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!